General

  • Target

    ceccddebae204588e12dee707daa652893af6d302aa18fd97340adb8a7241fcd

  • Size

    1.5MB

  • MD5

    3ed8e7e636e93f89b339b591f042f499

  • SHA1

    66fe1f30b01eecad5aa2dc60e11f2ee2b255c6a1

  • SHA256

    ceccddebae204588e12dee707daa652893af6d302aa18fd97340adb8a7241fcd

  • SHA512

    382107518442c164c101c646d5802f218803f113f8215fd7dd31cfb5df50653fa5b020b04816aa2ea9f54a44c976b548475e71d7f423d9053044e50fd9519a2e

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwBeeLyKddyDUKZfCf9ggU5eOPMMKTbcwIWtVZP:ROdWCCi7/rahFHKsUKC6PeOwctWh

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ceccddebae204588e12dee707daa652893af6d302aa18fd97340adb8a7241fcd
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections